Create htpasswd-compatible credential lines for basic-auth protected routes.
Updated
Quick start
Provide username and password to create an htpasswd entry.
Set username and password.
Create salted credential line.
Append line to protected auth file.
In-depth guide
An .htpasswd file is the credential store behind HTTP Basic authentication on Apache and Nginx. Each line maps a username to a hashed password, and the web server checks incoming credentials against it before serving a protected path. This tool builds those lines in your browser so you can drop them straight into a server config.
Every entry is username:hash on its own line. The hash is salted, so two users with the same password still get different hashes. Apache historically used its own bcrypt or MD5-crypt variants; modern setups prefer bcrypt because it is deliberately slow and resistant to brute force.
.htpasswd file (run the tool again per user and append each line).AuthUserFile in Apache, or auth_basic_user_file in Nginx — and reload.htpasswd is perfect for locking down a staging site, an internal dashboard or a single admin path with minimal moving parts. For real user accounts, password resets or roles, use an application-level auth system or an identity provider instead — a flat file does not scale to that.
A username:hash line compatible with Apache and Nginx .htpasswd files, where the hash is salted so identical passwords still differ between users.
Generate one line per user and append each to the same .htpasswd file. Each line is independent.
Point AuthUserFile at the file in Apache, or auth_basic_user_file in Nginx, then reload the server so the protected path requires the credentials.
Prefer bcrypt where your server supports it — it is deliberately slow and resistant to brute-force, unlike the older MD5-crypt or crypt formats.
Outside the web root so it can never be downloaded directly, and serve the protected path over HTTPS so credentials are not exposed in transit.
No. The hash is generated locally and the password is never uploaded.
Keep exploring
Hand-picked utilities that pair well with the one you're on — all free, client-side, and zero-signup.
Encrypt and decrypt text locally with AES-256-GCM and passphrase-derived keys.
Generate signed HS256 JWTs from custom header and payload JSON locally.
Generate 6-digit rolling TOTP codes and otpauth URIs from Base32 secrets.
Shrink PDF file size without uploading to a server.
Body Mass Index with metric / imperial inputs and WHO category bands.
Combine multiple PDFs into one in your browser.
Split a PDF by pages or page ranges, download as zip.